Hi all, I've created a new install of JSS 8.62 on a running on a new install of Server 10.6.8. Global Management Framework: JSS URL both fields are populated with the JSS URL (the top one is the 8443 port and the bottom one 9006 port).In the PKI using the Built-in Certificate Authority.In the Push Notification Certificate, I went through the process of obtaining an APN certificate from Apple and that will expire Oct 2013.In the Computer Management Framework Settings > Security Enable Certificate-Based Communication is ticked as well as Enable Push Notifications for OS X 10.7 or later Computers. I have a three configuration profiles that just don't go anywhere. Currently, for testing, there are two machines in the inventory, one MacPro running 10.7.4 and a MBPro running 10.8.2. In the Inventory I see both machines 'Enrolled' but MDM Capable says 'No' on both.On the 10.7.4 MacPro inventory details page, I see in the Management History I see Management

Hello everyone, We have a specific situation where we want to block access to Guest network for our users, completely. We want them to use our more secure network, even for things such as internet access. Does anyone know of a good way to block access to a particular network or SSID? This can potentially be done with MAC address filtering on the Wireless Router side of things, but I was just wondering if someone knew of a way to do this on a lot of machines on the Mac side.

I'd like to block out most system preferences from pretty much everyone, but I'd like to keep stuff like Wacom and Symantec pref panes accessible. I do not see a way to do this with Casper config profiles. I was under the impression that if the pref pane is installed on the management server you could select it as a restricted pane or not. Anyone know a way around this? I want to block the iCloud, mail/contacts/calendars, sharing, and language panes. Everything else can stay because they either require admin rights or I don't care what they get set to.

A user on this site named donmontalvo turned me onto this way to access the MySQL DB. $ mysql -u jamfsoftware -pEnter password: Welcome to the MySQL monitor. Commands end with ; or g.Your MySQL connection id is 11478Server version: 5.0.92-log Source distribution Type 'help;' or 'h' for help. Type 'c' to clear the current input statement. mysql> show databases;+--------------------+| Database |+--------------------+| information_schema | | jamfsoftware | | test | +--------------------+3 rows in set (0.00 sec) mysql> use jamfsoftware;Database changedmysql> show tables; My next question is how do I view the columns in a table?

We have our users use a backup disk at home and we are finding that with 10.7.5 users are having crazy slow backup time (lockups even) when trying to backup to their backup drives. If we disable spotlight a 9MB backup takes seconds. If we enable spotlight then we find that same 9MB backup would take 1 to 2 hours. For a 60GB backup it says a few weeks and we are only seeing this when both spotlight and time machines are enabled. Anyone else out there have the same issue?

I need to install some trust certificates on our deployed computers. I started a Composer snapshot, installed the certificates in Keychain Access and in Firefox, then I stopped the snapshot. When I test deploy this package it doesn't seem to install the certificates in Firefox. I think it works with Keychain Access though. How can I deploy these .crt certificates? Should I not be using Composer to do this? Happy Friday!

I know Jamf/Casper uses MySQL on the backend for Casper. On our Casper Admin machine I don't see any GUI to access MySQL. I want to see the Tables/Views so I can write custom SQL statements. Where is this done?

Hi, inside the CASPER Web Page I navigate to SettingsCasper Admin and I see all of our images (we have 3). Since two of these images are for testing only how do we set 1 image to be the default image when we NetBOOT to our network?

I am trying to change settings in the managed preference com.google.Keystone.Agent.plist. I have it set up under managed preferences, but I think the software is looking for this preference file in ~/Library/LaunchAgents I changed that file manually and got the result I wanted on the client. What is the best way to change the parameters in this file under ~/Library/LaunchAgents? Is there a way to do that with Managed Preferences or do I need a shell script to run? Thanks, John

http://imageshack.us/photo/my-images/715/screenshot20120910at240.png/ I have a problem (again) When I try to restore my image to a 15 inch retina MBPro the "Creating jamHelper" stucks at this point (See link) The 13" MBPro runs good. The image is already copied, and I can boot the MBPro but Casper Imaging won't continue. I use Target Imageing Mode Thanks in advance! ps: Don't look to the imagename in the image, it's not correct!

Hi, Our JSS is linked to GSX and thus items show when their warrantee ends but as a data like xx/xx/xxxx. Has anybody devised a way to build an inventory search that show what items are out of warrantee, aka the date listed has already passed? This would help us find items that need replacing. Thanks!

I have a need to gather computer names from the jamf database, based solely on information in the log_actions table, and my MySQL-fu is a tad rusty, to say the least. Any help from someone who knows way more about SQL would be SOOO much appreciated. Basically I have to select computer_name from computers,logs,log_actions where...SQLMAGIC ... something along the lines of the action in log action = 'Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/Adobe CS4.pkg'.' ...SQL MAGIC... yeah I have no idea how to write this query. I know what has to be done, but... yeah. Thanks! Andrew

Driving to/from JNUC...need cheap(ish) hotel recommendations for: Joplin, MO Des Moines, IA http://tinyurl.com/9awys7e Thanks in advance for any tips! :D Don

Hey Gents.I've setup my environment with a series of internal SUS servers. and setting a policy up to run on the machines to run updates pointing to the specific server depending on the Network Segment etc. if i force the machine to point to the local SUS server and manually run updates via the Software update menu, everything runs fine, picks up updates and installs them. but if i run the policy I get an error saying Cannot install software updates. There may be a proxy in place. but I am not running a proxy for my macs. here's the log after the policy executes: /usr/sbin/jamf is version 8.6Executing Policy Software Update 32 Gros Copy...[STEP 1 of 3]Setting Software Update Server to http://<SUSServer>:8088/index.sucatalog for root...Setting Software Update Server to http://<SUSServer>:8088/index.sucatalog for all accounts...[STEP 2 of 3]Installing all available Software Updates...Cannot install software updates. There may be a proxy in place. Has anyone c

When we assigned our computers, we used the Real name and Username fields in the computer record to do so. However, we ended up with a few students getting the wrong computer. Long story short, I need a way to compare the username field to an extension attribute I created to see what user was logged in at last inventory and see if they are the same. I would be open to doing this with an inventory search or by creating an additional extension attribute. The problem is that I don't know of any way to query the JSS database from within a script. Is this possible at all?

Hi all, Are profiles made with Profile Manager on 10.7 server supposed to work on 10.8 clients? I assumed so, but my VPN profile doesn't seem to. The keychain entry is not created properly, leaving out the account name and not using the correct password. Do I need to use Profile Manager on 10.8 to make this work? Or is there something else I can do? Any ideas? Thanks, Jason

Hi All, Just wondering is anyone else experiencing the following error Profile Installation Failed.The Server Certificate for "https://blah.blah.blah:8443/Blah/enroll/SCEPProfile?invitation=Blahblahblah" is invalid. installing the MDM Profile...This works on ios 5 clients not on ios 6?? both Versions of JSS 8.52 and 8.61 ???? Any Ideas???

I need a script to either delete last logged on user or delete all users except for local admins (I figured last logged on user was the safest). I do not need to delete the home folder just the user account. I have tried to build the script unsuccessfully due to being new to the Mac OS.

I want to search for computers which have no entry for a given attribute. Is it possible to search for a null value? Is it possible to search with a regular expression?

I need to create a 10.8 net boot image. I have 10.8 clients but I do not have 10.8 server to get the server tools. I saw where someone created it with Composer, but I do not see the option for NBI. Can someone give me some direction? Thanks! Sharla

Has anyone captured a 10.7.5 installer yet? Just wonder it is available yet or ever will be.

Hello Everyone, I've updated our school district's software update servers (SUS)in the JSS in the Settings/network segments module of the web interface and have yet to see a client's /Library/Preferences/com.apple.SoftwareUpdate.plist file reflect the sus servername change. Should I be pushing the clients sus out via a policy? Or is specifying it in the network segment all that needs to be done? How can I verify that a client's SUS has updated correctly? Many thanks for your time,Paul

Would anyone happen to have extension attribute templates for iTunes, iPhoto, and iMovie? Any help is appreciated.

Here's one for the boards. I'm pretty stumped on WHAT'S going on, but at least I know at what point I am seeing success/failure? Here it goes: I have a policy that runs a removal script for Microsoft Office 2004/2008, installs Office 2011 14.0, then 14.1, then 14.2.3, then copies several pref files for autoupdate, setupassistant, bladdy blah to users' folders and the user template. The next morning when the user logs in, they open Outlook 2011 and a script runs to auto migrate their Entourage database. Here's the problem: This works like a charm if a user is logged in while the policy runs to uninstall entourage/install office. Outlook can open, data is migrated, everyone is happy. When no one is logged in and the policy runs, outlook will fail to start, asking for a license key (and yes, we do have a site license). I have it narrowed down to some sort of process that Office 14.0 is running when it installs -- I see an office folder icon pop on the dock, do

Getting an odd thing happening when creating packages in Composer 8.52. The packages (pkg or dmg) contain, and deploy the following directories. ROOTScriptsSettingsSnapshots Like it is packaging the contents of a directory above where it should from the temporary storage. When the package is deployed it will put all of these directories at / so that /Applications/SuperFun.app would be at /ROOT/Applications/SuperFun.app Anyone seen this? Thanks Matt